Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
File:                     xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft (raw, json)
Hash identifier:          mncAZrgBKrLzr0FBTVfVayO3nhrk4Wm0hcN1/YftXuI=
Subject key identifier:   A8:03:9D:24:FD:A3:43:15:6F:5C:91:86:6B:0C:CF:6C:5B:14:54:56
Authority key identifier: C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
Certificate issuer:       /CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Certificate serial:       018F86A3CBC2671AF899EDD24CC62FBAD25B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
Manifest number:          0142
Signing time:             Fri 17 May 2024 13:00:32 +0000
Manifest this update:     Fri 17 May 2024 13:00:32 +0000
Manifest next update:     Sat 18 May 2024 13:00:32 +0000
Files and hashes:         1: xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl (hash: QAzMS0XKTcatZ1oeX81l94ksZthAEZlCPcc3CmgXH14=)
                          2: zb6-bGxjc7N49amm58gSqR82CSk.roa (hash: lmrju0NovwENUmWVDx82Ow/8jsGEsZyRqYmkMfaIkvw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:cb:c2:67:1a:f8:99:ed:d2:4c:c6:2f:ba:d2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6c6653e87bb2ef9adbb061960e20500a554f035
        Validity
            Not Before: May 17 13:00:32 2024 GMT
            Not After : May 18 13:00:32 2024 GMT
        Subject: CN=a8039d24fda343156f5c91866b0ccf6c5b145456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:5f:5a:e3:84:5f:50:08:ca:d1:56:c8:d9:
                    2b:1b:86:3d:20:3c:ce:8f:68:d3:a2:96:b5:77:6d:
                    6a:c3:d5:20:9d:36:0e:32:81:58:b5:74:c1:34:5d:
                    c2:b5:1d:07:16:9c:00:62:7e:b1:83:2e:87:4f:c0:
                    56:a4:ee:7e:ca:53:45:21:a0:1f:97:c8:69:71:07:
                    c7:6a:97:1e:f7:e7:ec:32:ef:e4:0c:03:69:63:e3:
                    99:a8:63:de:27:d0:58:39:9d:bb:14:84:31:1a:ea:
                    f5:be:d4:5b:b9:e7:4b:fa:69:86:17:3b:26:1a:16:
                    d3:24:47:26:7d:b4:f0:9f:eb:2a:68:51:fc:de:6f:
                    03:fa:d3:05:81:70:37:2b:f4:f3:1c:00:3a:14:a7:
                    9e:64:b1:89:f7:80:67:84:38:aa:93:7e:2d:de:2a:
                    53:bc:8a:fd:d2:c8:11:21:b8:ce:8d:08:1c:15:41:
                    97:4a:6a:e0:f9:ab:d7:dd:7f:17:82:fa:b2:a4:4f:
                    4d:87:29:98:96:7f:b5:af:3e:b7:17:57:9b:03:ac:
                    f6:65:92:5e:7a:92:b0:10:8c:77:c0:a9:0c:55:e7:
                    9b:27:6f:e1:26:0f:05:ea:90:6d:26:07:1d:7c:9f:
                    3a:7a:d7:88:63:30:61:20:d5:f4:af:82:d1:a3:2b:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:03:9D:24:FD:A3:43:15:6F:5C:91:86:6B:0C:CF:6C:5B:14:54:56
            X509v3 Authority Key Identifier:
                keyid:C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:28:27:c4:e2:e0:d7:78:01:89:9d:0b:a8:fb:61:7d:18:a7:
         c0:21:80:e9:3c:8b:11:0a:bf:c6:f6:3b:90:6b:72:ec:44:00:
         65:93:54:21:e8:57:0d:ca:21:f0:24:24:49:54:f3:19:0d:17:
         23:c4:dd:4a:32:5d:81:49:d8:45:41:36:7c:fa:e2:fd:93:07:
         58:64:94:ab:51:ad:09:47:af:c0:8c:eb:57:30:53:ff:c1:dc:
         88:a4:fe:06:89:be:b8:27:61:88:76:ed:6d:55:8d:d8:9b:f6:
         a5:22:c5:a6:9f:07:98:91:f1:78:85:72:b6:99:c1:77:d6:75:
         bb:5f:48:a2:2b:c1:3f:54:21:8a:02:f4:c0:6d:3a:96:99:28:
         a1:37:8a:72:0c:96:c1:56:7b:36:9e:8a:9a:17:8d:e1:44:d9:
         a0:c4:a0:66:a1:fc:8e:32:60:04:1a:05:09:66:1d:df:3f:53:
         be:1f:1c:fb:fd:f5:ba:09:49:e9:ee:ca:b4:d5:b0:29:a6:7f:
         14:37:b6:86:0b:68:bb:05:aa:71:8c:65:25:4d:6a:fe:4f:22:
         57:c8:ec:c3:f3:c2:aa:a3:a7:c7:25:b4:4c:43:31:49:38:9f:
         d3:89:51:14:8b:3a:87:f4:ae:a5:77:b2:fa:ba:53:3c:72:95:
         fa:f4:ac:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:55:41 2024 by rpki-client on console-ams.rpki-client.org